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About This Document 

This dcxu merit is the release note for HP DC E/9000 Version 1.6 (HP DCE 
1.6) on HP-UX 10.30. 

For more information about the U.S./Canada Software and H P DCE 1.6 
in general, see HP/ DCE 9000 Version 1.6 for HP-UX 10.30 Release Note 
(B3190-90070) and Planning and Configuring H P DCE 1.6 
(B3190-90071). 
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Release Note 


Because of U.S.export restrictions, HP DC E/9000 Version 1.6 has two 
versions, the U.S./Canada version and the Export version. 
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Release Note 

HP DCE U.S./Canada Software 


HP DCE U.S./Canada Software 

The DCE Security component uses the Data Encryption Standard (DES) 
algorithm as its default encryption algorithm. Becausethe U nited States 
State Department restricts the export of DES software, H P supplies two 
binary versions of the deed daemon and DCE library: 

• The U.S./Canada version is available only to H P customers in the 
United States and Canada. The U.S./Canada version of libdee 
supports use of DES to encrypt RPC argument values, via the 
"privacy" authentication level, and the use of DES to encrypt 
GSS-API messages, via thegss_seal "confidentiality requested"flag. 
The 

U.S./Canada version of deed supports secure remote key table 
management. 

• The Export version is availabletoall HP customers. The Export 
version of libdee disables the "privacy" authentication level in RPC, 
thegss_seal "confidentiality request^"flag, and all program entry 
points to encryption routines. The Export version of deed does not 
support secure remote key table management. 

If an application uses the Export version of the DCE library and specifies 
the RPC "privacy" authentication level, the library returns an error at 
run time. 

If an application uses the Export version of the DCE library and specifies 
theGSS-API "confidentiality requested"flag, theGSS interface returns a 
diagnostic flag at run time. 

See the deed man page for more information about remote key table 
management support i n the two versions of the daemon. 

Software Included in the U.S./Canada Version 

The U.S./Canada version of H P DCE 1.6 includes the following software: 

/usr/lib/libdce.l 
/opt/dee/sbi n/deed 
/opt/dce/lib/libdce.a (when supplied) 
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Release Note 

HP DCE U.S./Canada Software 


Limitations, Interoperability, and 
Compatibility of This Release 

For information on the limitations of the U.S./Canada version, and its 
interoperability and compatibility with the Export version of the DCE 
software, and with other versions of DCE, seethe H P/ DCE 9000 Version 
1.6 for HP-UX 10.30 Release Note (B3190-90070) and Planning and 
Configuring HP DCE 1.6(63190-90071). 

I mportant I nstallation I nformation 

This section discusses important information related to installing the 
U.S./Canada version of HP DCE 1.6. For detailed information about 
installing HP DCE 1.6, see Planning and Configuring H P DCE 1.6. 

The installations of the U.S./Canada versions of /usr/lib/libdce.l, 
/opt/dce/sbin/dced, and—when supplied— /opt/dce/lib/libdce.a 
attempt to preserve the default Export versions rather than writing over 
them. This is done by appending the suffix ".Int" to any existing Export 
version software, installing the U.S./Canada version software with a 
".Dom" suffix, and creating a hard link to the U.S./Canada version in the 
place of the original software. 

If you want to return a given system to the default Export version state, 
use swremove(lm) to remove the DCE/9000 U.S./Canada Software for 
HP DCE 1.6. swremove will undo the U.S/Canada version installation 
and update the Software Distributor (SD) database with the correct 
information. This is the recommended way to return a system to an 
Export version state. 


CAUTION Do not re-install the Export version over the U.S./Canada version of the 

software. Re-installing the Export version will leave information in the 
SD database indicating that the U.S./Canada version is still there, which 
may cause problems with any products that have dependencies on the 
U.S./Canada version of libdce.l. 


Iibdce.l must be present on all systems that run HP-UX 10.30, si nee a 
number of applications (one of which istheSD product) depend on it. 

The U.S./Canada version of li bdce.l offers a superset of the functi onal ity 
in the Export version; it will, therefore, satisfy the requirements of any 
application (such as SD) that declares a dependency on the Export 
version. 
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